(19) 


J 


Europaisches Paten tarn t 
European Patent Office 
Office europeen des brevets 


(12) 


(43) Date of publication: 

16.01.2002 Bulletin 2002/03 

(21) Application number: 01202496.4 

(22) Date of filing: 29.06.2001 


(H) EP1 173 001 A2 

EUROPEAN PATENT APPLICATION 

(51) Int CI7: H04N 1/32 


(84) Designated Contracting States: 

(72) Inventor: Honsinger, Chris W. 

AT BE CH CY DE DK ES Fl FR GB GR IE IT LI LU 

Rochester, New York 14650-2201 (US) 

MCNLPTSETR 


Designated Extension States: 

(74) Representative: 

AL LT LV MK RO SI 

Lewandowsky, Klaus, Dipl.-lng. et al 


Kodak Aktiengesellschaft, Patentabtellung 

(30) Priority: 11.07.2000 US 613989 

70323 Stuttgart (DE) 

(71) Applicant: EASTMAN KODAK COMPANY 


Rochester, New York 14650 (US) 



(54) Authenticatable image with an embedded image having a discernible physical characteristic 


(57) A method is disclosed for printing an authenti- 
catable image having an embedded image into a receiv- 
er having a discernible physical characteristic, such that 
the printed image can be used to authenticate the re- 
ceiver includes scanning the receiver to produce infor- 
mation related to the discernible physical characteristic 


of the receiver, and providing a carrier which includes 
information related to the scanned receiver discernible 
physical characteristic. The method also includes com- 
bining the carrier with an input image to form the authen- 
ticatable image having the embedded image, and print- 
ing the authenticatable image having the embedded im- 
age onto the receiver. 
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Description 

[0001] The invention relates generally to the field of image processing, and in particular to providing a secure doc- 
ument such as a passport, event ticket, currency, or a postal stamp, coupon or envelope. 
5 [0002] Counterfeiting of currencies costs honest people billions of dollars each year. An article from the Hardcopy 
Observer, "Pitney Postage Plan Wins Approval, Escher Tries New Approach", January 2000 announces a technology 
that enhances the security of postage documents by forming a signature of the paper fiber over a localized region and 
then printing this signature elsewhere on the envelope in the form of wavy lines. 

[0003] Since the image obtained from scanning paper fiber is random, it is very likely that no two envelopes ever 
10 have or ever will possess the same fiber structure. Therefore, every envelope may be considered to have a unique 
identifier and may be used to uniquely identify every letter. The technique requires that the fiber signature be printed 
and encoded as a series of wavy lines elsewhere on the envelope. How the fiber signature is distilled from the fibrous 
region is not disclosed. The reason that the method is compelling is that it is unlikely that a counterfeiter would discover 
the process needed to duplicate this process. Simply copying the envelope is not sufficient because modern copiers 
15 do not copy the fibrous structure. The copier resolution is simply not high enough. By providing an information channel 
directly related to the unique aspects of the paper itself, the ability to counterfeit is minimized. 
[0004] However, the technique described above has a significant shortcoming. The requirement that the fibrous 
signature be printed as an isolated series of wavy lines is esthetically restrictive. 

[0005] It is an object of the present invention to provide a cryptographically secure method for invisibly hiding (or 
20 embedding) a message derived using a texturally derived signature in an arbitrary printed image on an envelope or 
other receiver, reducing the need for a visible representation of the fibrous data to authenticate an image, 
[0006] This object is achieved by a method for printing an authenticatable image having an embedded image into a 
receiver having a discernible physical characteristic, such that the printed image can be used to authenticate the re- 
ceiver, comprising the steps of: 

25 

a) scanning the receiver to produce information related to the discernible physical characteristic of the receiver; 

b) providing a carrier, which includes information, related to the scanned receiver discernible physical character- 
istic; 

c) combining the earner with an input image to form the authenticatable image having the embedded image; and 
30 d) printing the authenticatable image having the embedded image onto the receiver. 

[0007] The present invention is directed at overcoming the ability to counterfeit a paper, plastic or film based receiver. 
According to one aspect of the present invention, a method is disclosed that encrypts and imprints a unique physical 
attribute of a region of a receiver onto another region of the receiver. At the time of authentication of the document, 
35 the physical attribute is again measured and compared to the imprinted region. If they match, the receiver is declared 
authentic, if they do not match the receiver is declared suspicious. 

[0008] According to another aspect of the present invention, a carrier signal is derived by forming a high-resolution 
scan of a region of the receiver. The carrier derived will reflect the discernable random or textural characteristics of the 
receiver, that is, a unique signature of the receiver. Regions of the carrier signal, in a preferred embodiment, are then 

40 spatially rearranged in accordance with an encryption key. The encryption key may be kept secret by an authority. The 
resulting rearranged carrier is processed to a different resolution so that it may be printed without much information 
loss according to the printer. This carrier is then used to carry additional information by convolving the carrier with a 
message image to form a dispersed message. Using the printer, the dispersed message is printed directly on the 
receiver or is printed in combination with another (possibly personalized) image. 

45 [0009] The resulting printed receiver may then be used as a currency, a certificate of authenticity, postage, passport, 
credit card, forensic document, or any other commerce vehicle requiring high security, 

[0010] At the time of authentication, the receiver is scanned in the same two places at their respective resolutions. 
The scanned carrier region is rearranged in accordance with the decryption key and is correlated with the scan con- 
taining the message. The result of the correlation is the message image. If the contents of the message image are 
50 discernable, the receiver must be authentic because it is unlikely that two high-resolution scans of the receiver could 
produce the same rearranged carrier. 

[0011] These and other aspects, objects, features, and advantages of the present invention will be more clearly 
understood and appreciated from a review of the following detailed description of the preferred embodiments and 
appended claims, and by reference to the accompanying drawings. 

55 

FIG. 1 shows, in a side by side fashion, a binary message image having +1's and -1's and an iconic message 
image as an edge map depicting a Kodak logo; 

FIG. 2 is a graph, which depicts the Fourier amplitude vs. the frequency of an optimally designed carrier; 
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FIG. 3 shows an embedded image of a license plate with its edge map; 
FIG. 4 shows an altered license plate image wherein the second "M" is replaced with a "D"; 
FIG. 5 shows an envelope containing a scan area and a picture used to hide the secure embedded data; 
FIG. 6 is a block diagram showing the steps needed to form the message image needed to practice the invention; 
5 FIG. 7 depicts a block diagram form the process of forming a carrier in accordance with the present invention; 

FIG. 8 depicts, in block diagram form, the shaped rearranged carrier convolved with the message; 
FIG. 9 shows that subregions can be scanned from isolated regions separately; and 

FIG. 10 depicts the process, in block diagram form, of extracting the embedded message from a tiled image on 
the receiver using weighted sums. 

10 

[0012] The invention utilizes aspects of data embedding. The science of data embedding is also referred to as data 
hiding, information hiding, data embedding, watermarking and steganography. A preferred data embedding technique 
is disclosed in US-A-6,044,156. Here, an original image is represented as the two-dimensional array, /(x,y), the em- 
bedded image, /1(x,y), and a carrier is defined as C(x,y). A message that is embedded, M(x,y), in its most general form 

15 is an image. The message can represent an icon, for example, a trademark, or may represent the bits in a binary 
message. In the latter case the on and off states of the bits are represented as plus and minus ones, or positive and 
negative delta functions (spikes) which are placed in predefined and unique locations across the message image. An 
example of a binary and an iconic message image is shown in FIG. 1 , Examples of iconic data types are trademarks, 
corporate logos or other arbitrary images. Performance generally decreases as the message energy increases so edge 

20 maps of the icons are used. Examples of binary datatypes are 32 bit representations of URL's, and copyright ID codes, 
or authentication information. 

[0013] With these definitions the preferred embedding equation is: 
25 r(x,y) = a{M(x,y)*C(x,y)) + /(x,y), (1) 

where the symbol, *, represents circular convolution and a is an arbitrary constant chosen to make the embedded 
energy simultaneously invisible and robust to common processing. From Fourier theory, spatial convolution in the 
frequency domain is the same as adding phase while multiplying magnitudes. Therefore, the effects of combining the 

30 message with a carrier, such as by the described convolution technique, distributes the message energy in accordance 
with the phase of the carrier and to modulate the amplitude spectrum of the message with the amplitude spectrum of 
the carrier. If the message were a single delta function and the carrier of random phase and of uniform Fourier mag- 
nitude, the effect of convolving with the carrier would be to distribute the delta function over space. Similarly, the effect 
of convolving a message with a random phase carrier is to spatially disperse the message energy. 

35 [0014] The preferred extraction process is to correlate with the same carrier used to embed the image: 


IU>y) ® COr.y) =*{M{x t y) * C(x,y)) ® C(x t y) 
+/(jr O 0®C(x 1 y), ' . 

40 

where the symbol, ®, represents circular correlation. Correlation is similar to convolution in that Fourier magnitudes 
also multiply. In correlation, however, phase subtracts. Therefore, the phase of the carrier subtracts on correlation of 
the embedded image with the carrier leaving the message. Indeed, assuming that the carrier is designed to have 
45 uniform Fourier amplitude, then, and the process of correlation of the carrier on the embedded image Eq. 2, can be 
reduced to: 

/'(x,y)®C(x, y)=aM(x,y) + noise (3) 

50 

That is, the process of correlation of the embedded image with the carrier reproduces the message image plus noise 
due to the cross correlation of the image with the carrier. 

[0015] Tiling the dispersed message on the original image improves the robustness of the algorithm. For this inven- 
tion, a single 256x256 dispersed message is tiled over the entire image. Upon extraction, each 256x256 region is 
55 aligned and summed to produce the final message. 

[0016] The extracted message is denoted as M\x,$ t one can rewrite the equations for extracting the message (Eq. 
2 and Eq. 3 ), above as: 
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M'(x,y) =aM(x,y) * {C(x,y) ® C(x,y)) + noise (4) 

The above equation suggests that the resolution of the extracted message is fundamentally limited by the autocorre- 
5 lation function of the carrier, C(x,y)®C(x,y). Any broadening of C(x,y)®C(x,y) from a delta function will blur the extracted 
message when compared to the original message. Another way to view the effect of the carrier on the extracted mes- 
sage is to consider C(x,y)®C{x,y) as a point spread function, since convolution of the original message with C(x,y)®C 
(x,y) largely determines the extracted message. 

[001 7] The design of the carrier should consider both the visual detectability of the embedded signal and the expected 
10 signal quality at the extraction step. There is clearly a design tradeoff between achieving optimum extracted signal 
quality and embedded signal invisibility. 

[001 8] A carrier designed for optimal extracted signal quality will possess increasing amplitude with increasing spatial 
frequency. This may be derived from the well-known characteristic of typical images that the Fourier amplitude spectrum 
falls as the inverse of spatial frequency. At low spatial frequencies, where typical images have their highest energy 
15 and influence on the extracted image, our carrier uses this result. In particular, the mean or DC frequency amplitude 
of our carrier is always zero. As spatial frequency is increased, the carrier amplitude envelope smoothly increases with 
increasing spatial frequency until about 1/16 to 1/5 Nyquist. 

[0019] For frequencies greater than this, the carrier envelope is derived from a Contrast Sensitivity Function (CSF). 
A graph representing a one-dimensional slice of the Fourier amplitude of such a carrier is depicted in FIG. 2. Use of 

20 the CSF in an image embedding application is described in greater detail in US-A-5,905,819. 

[0020] The CSF provides a measure of the sensitivity of the average observer to changes' in contrast at a given 
spatial frequency. The reciprocal of the CSF can be used to prescribe the amount of amplitude needed for the embedded 
signal to be detectable by an average viewer. Many modern CSF models facilitate for observer viewing distance, 
background noise, receiver dot density, color component wavelength and other factors. 

25 [0021] Use of these CSF parameters can be an advantage when optimizing an embedding algorithm for a specific 
application. One particularly useful way of sizing the embedding algorithm for a specific system is to define the quality 
of the embedded signal in terms of the viewing distance at which the embedded signal can be visually detected. Once 
this is defined, an optimized carrier can be immediately derived and tested. 

[0022] For a binary message, the impact of this carrier envelope is to produce a very small sidelobe around each 

30 delta function. It may be argued that the sidelobes rob the algorithm of bandwidth. However, it has been found that the 
destructive processes of compression, error diffusion, printing and scanning have a far greater influence on the band- 
width of the algorithm. In a binary message, these destructive processes are the limiting factor of the bit density and 
can be thought of as defining the minimum separation distance between the delta functions. So long as the sidelobes 
are confined within half of the minimum bit separation distance, sidelobe interference may be considered minimal. 

35 [0023] The top row of FIG. 3, shows the embedding of an image of a license plate with its edge map. The original 
license plate is "MDM 454" and the edge map that is embedded also shows "MDM 454". FIG. 4 shows an altered 
license plate image wherein the second "M" is replaced with a "D". If this image were embedded with the edge map 
as in FIG. 3, the original lettering would be recoverable, providing a unique form of authentication. 
[0024] Correcting for rotation, scaling and skew is a fundamental element of all robust data embedding techniques. 

40 in US-A-5,835,639, Method for detecting rotation and magnification in images, a preferred method of correction of 
rotation and scale is provided. The correction technique relies on autocorrelation the embedded image. For example, 
upon autocorrelation of an embedded image that has not been rotated or scaled, one would expect to see correlation 
peaks spaced horizontally and vertically at intervals of 256 pixels and 256 lines. At the zero offset correlation point, 
there is a very high peak due to the image correlating with itself. 

45 [0025] Now, if the embedded image is scaled, the peaks must scale proportionately. Similarly, if the embedded image 
is rotated, the peaks must rotate by the same amount. Therefore, the rotation and scale of an image can be deduced 
by locating the autocorrelation peaks. Detection of the actual rotation angle© is limited to angles in the range (-45° , 
+45°]. However, the actual rotation angle will be a member of the set Q actua} ^calculated* n90 °' where n is an integer. 
Because of the possibility that the image has been flipped or rotated in increments of 90 degrees during the message 

so extraction process, this ambiguity is not a fundamental limitation. 

[0026] The effect of the autocorrelation properties of the original image can be significant. Without ancillary process- 
ing, high amplitude low frequency interference in the autocorrelation image can make the process of detecting peaks 
difficult. To minimize this problem, localized first order and second order moment normalization on the embedded image 
before the autocorrelation. This process consists of replacing each pixel in the image with a new pixel value, v new : 

55 


4 


EP1 173 001 A2 

where v 0/rf) is the original pixel value, m ofd} is the local mean of the image, is the desired standard deviation, 

which is generally set to the expected embedded signal standard deviation and o okj is the local standard deviation. 
Because this operation is over a small area, typically over a (3x3) or (5x5) region, its effect in removing the high 
amplitude, low frequency coherent noise is quite substantial. For the limiting case when a o!d o, v new is equated to 

5 a value taken from a random noise generator having a standard deviation o desire& 

[0027] The next piece of ancillary processing performed is to shape the autocorrelation peaks. This is done during 
the FFT operation used in the autocorrelation processing. A function that increases linearly with spatial frequency in 
the Fourier magnitude domain is quite satisfactory. This function is consistent with a Wiener filter designed to maximize 
the semblance of the correlation peaks to delta functions under the assumption that the image Fourier amplitude spec- 

10 trum exhibits an asymptotic "1/(spatial frequency)" falloff. Following these processing steps produces peaks that need 
little further processing. 

[0028] Importantly, because autocorrelating the embedded image requires no extra calibration signal, it does not tax 
the information capacity of the embedding system. In addition, this technique can be applied to any embedding tech- 
nique with redundant embedded signals and may implemented on a local level to confront low order geometric warps. 
15 [0029] The ability to recover from cropping is an essential component of a data embedding algorithm. 

[0030] Indeed, if the origin of the 256x256 extracted region was a distance, (Ax, Ay) , from its nearest "original" origin, 
then the extracted message, M\x,fl can be written as: 


20 M'(x,y) = M(x,y)*8(x - Ax,y - Ay) (7) 

where it has been assumed that the convolution is circular, that the carrier autocorrelated to a delta function and that 
the image contributes no noise. 

[0031] On the surface, this circular shift ambiguity is a severe limitation on data capacity because it imposes the 
25 constraint that the message structure must be invariant to cyclic shifts. However, the present invention provides a way 
around this by placing the bits in the message in a special manner. First, there is required the use of a message 
template, that is, a prescription of where to place the bits in a message image. The message template is derived by 
placing positive delta functions on a blank 256x256 image such that each delta function is located a minimum distance 
away from all others and such that the autocorrelation of the message template yields as close as possible, a delta 
30 function. That is, the bits are placed such that the message template autocorrelation sidelobes are of minimal amplitude. 
[0032] Now, correlation of the extracted region with a zero mean carrier guarantees that the extracted circularly 
shifted message M'(x,y) is also zero mean. If the message template is called, 7^x,y), then the absolute value of the 
the extracted template must be practically equivalent to a circularly shifted message template. That is, 

35 \M(x,y)\=T(x,y)*§{x- Ax,y- Ay) (8) 

This implies, due to the autocorrelation property of the message template, that the shift from the origin of the message 
can be derived by correlating \M\x,y)\ with T(x,y), since: 

40 

m(Ky)\® T(x,y) = 8(x - Ax,y - Ay) (9) 

Therefore, the result of the correlation will be a 256x256 image, whose highest peak will be located at the desired shift 
45 distance, (Ax, Ay). This peak location can be used to correctly orient the interpretation of the embedded bits. 

[0033] An embodiment of the present invention could be when the receiver is paper and the paper is a postal enve- 
lope. It should, however, be appreciated that virtually any media will suffice as a receiver so long as it has a discernible 
physical characteristic which is subject to a high resolution scan for producing a carrier. 

[0034] In accordance with the present invention, the method of printing an authenticatable image having an embed- 
50 ded image onto a receiver will now be described in more detail. FIG. 5 shows a medium, such as a medium 10, 
containing a scan area 12, and a picture used to hide the secure embedded image 14. FIG. 6 is a block diagram 
showing the steps needed to form the message image needed to practice the invention using the technique outlined 
above. The message, shown in block 16, should contain information such as postage. If the message only contained 
postage, say 33 cents, and if the maximum postage allowed for the size of the envelope was $2.56, then eight bits 
55 (2 8 =256) of information would be needed to convey all postage amounts. However, our experience with the algorithm 
has shown that performance is not substantially degraded when using 32 or 64 bits, when compared to 8 bits, providing 
a much greater number level of possibilities. Once the message has been expressed in its binary form, it is possible 
to encrypt, as shown in block 18, by using any desired encryption algorithm. After the encryption, the bits shown in 
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block 20 are placed on a message template 22 according to an arbitrary bit placement rule. As a preferred embodiment, 
assuming one takes the first bit and place it on the message template in the topmost and leftmost possible position. If 
the first bit is a 1 , the value 1 is disposed in a first position. If the bit is a zero, the value a -1 in the first position. The 
next bit from 20 is placed in the next top most left most position available, using the same rules for polarity. This process 

5 continues in this fashion until all bits placed yielding the message image 24. 

[0035] The message image needs to be convolved with the carrier derived from the fibrous character of the paper. 
The process of forming a carrier is depicted in FIG. 7. Scan area 12 is scanned at a high resolution in block 26. In a 
preferred embodiment, the area is scanned at 1200 dpi. This results in a region that is only 0.21 inches wide x 0.21 
inches in height, which for some applications may be too small. If this is the case, a larger region may be used for the 

10 carrier or message size. Once this image is obtained it is transformed to the Fourier domain as shown in block 28. The 
objective of the shaping step as shown in block 30 is to provide a carrier that maintains the fibrous character of the 
scan, but also provides an efficient information carrying entity. This shaping process will be described in detail below. 
After the shaping, the image is inverse Fourier transformed in block 32 to form a shaped carrier. In a preferred embod- 
iment, the shaped carrier is rearranged in block 34. The rearrangement step is intended to provide an additional level 

15 of security. Specifically, because a counterfeiter might determine the region of the paper where the carrier is derived 
either by the users explicit use of fiducials or by trial and error, rearrangement of the data in the shaped carrier is an 
important security measure. As a preferred embodiment, the shaped scanned carrier is divided into 16 equal area 
regions. Each of the subregions (64x64) is placed into a different place in the carrier image. It is important to make 
sure that there are no blank areas. One way to think of this is to construct a blank 256x256 image. Next, take a region 

20 from the equally divided area shaped scanned carrier. Place this in one of the equally divided areas in the blank image. 
There are 16 possible positions. Repeat the process with the next data from the shaped scanned carrier. There are 
now 15 possible positions to place this. The rearrangement step allows the carrier data to have 16! (16 factorial or 
20,922,789,888,000) different renditions. Additionally each of the carriers can be randomly flipped or rotated (in 90 
degree increments) to make the counterfeiter's job even more difficult. The prescription of the placement steps can be 

25 perform in accordance with a key known only to the authentication authorities. 

[0036] It is important to perform the rearrangement step after the shaping step. This is because the shaping step 
tends to normalize the scanned earners local statistics. Dividing the carrier into regions without the shaping step causes 
a decrease in performance in the extraction process. As an alternative to the rearrangement step detailed above, FIG. 
9 shows that subregions can be scanned from isolated regions separately. More particularly, the sixteen 64x64 sub- 

30 regions can be scanned from isolated regions separately. 

[0037] As mentioned above, the objective of the shaping step as shown in FIG. 7 block 26 is to provide a carrier that 
maintains the fibrous character of the scan, but also to provide an efficient information carrying entity. The shaping 
step shown in block 30 of FIG. 7 will now be described in greater detail. The shaping of the amplitude spectrum (derived 
from the FFTdata) is performed with respect to the human visual system and sharpness loss due to the printing process. 

35 The human visual system's role was described during the discussion of FIG. 2 above. Recall that except for near the 
DC frequency, we'd like to create a Fourier amplitude spectrum that is proportional the inverse CSF. A carrier derived 
in this manner can be improved on further by realizing that when printing an image on a receiver, the modulation transfer 
function (MTF) of the printer can be backed out before printing. (A function that expresses the ability of an optical or 
electronic device to transfer signals faithfully as a function of the spatial of the signal is commonly known as a modulation 

40 transfer function (MTF). The MTF is the ratio of the percentage modulation of a sinusoidal signal leaving to that entering 
the device over the range of frequencies of interest.) 

[0038] Therefore except for the very low frequencies around DC, the Fourier amplitude should be proportional to: 

45 Sprinter ( u > v ) slewing conditions ( u > v ) 

(u,v represent spatial frequencies of the two dimensional FFT) 

[0039] It is important to note that the input data to the FFT is real. The input spatial imaginary component is comprised 
entirely of zeros. However, in the Fourier domain, there will be an imaginary component. After shaping we'd like to 
so make sure that the inverse FFT provides a zero valued imaginary component. This ensures that energy defined in the 
FFT domain was not wasted. The concepts involved with ensuring that the inverse FFT is real is detailed in US-A- 
6,044,156. 

[0040] Now, it is well known to those in the practice of image processing that the phase contains the important 
information in an image, maintaining this information for this application is of paramount importance. The phase infor- 
ms mation of the Fourier transform contains the bulk of fibrous structure information. Only the amplitude spectrum of the 
FFT data should be modified during this shaping process. The phase value at each Fourier frequency should always 
be maintained. Recall that Fourier phase is given by the equation: 
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6(l/, v) = tan" 1 (lmaginary(F(u ( v))/Real(F(u,v))) 
Recall also that Fourier amplitude is given by the equation: 

5 

amplitude(u, v) - Vlmaginary(F(u,v)) 2 +Real(F(u,v)) 2 

If one were to multiply both lmaginaly(F(u,v)) and Real(F(u,v)) by a(i/,v) the phase is maintained and the amplitude 
10 spectrum is modified. That is: 

Q{u,v) = tan' 1 (a (ti,v)lmaginary(F(u ) v))/a(t/,v)Real(F(u ) v)))= tan' 1 (lmaginary(F(u,v)/Real(F(u,v)) 

15 Vlmaginary(a(u,v)F(u,v)) 2 +Real(a(i/,v)F(u,v)) 2 =a{u,v)amptitude(u,v) 

[0041] Therefore, the modification of the Fourier amplitude spectrum can be performed by multiplying the real and 
the imaginary components of the Fourier transform by the scalar that gives us the desired amplitude. If, 


a (u, v) = MTf^er ("> v ) cs/=r Jewing conditions ( u > v ) 1 Vlmaginary(F(u,v)) 2 +Real(F(u,v)) 2 

[0042] Then, the shaping step is simply performed by multiplying each component of the real and imaginary Fourier 
coefficients by a(t/,v), that is: 

25 

lmaginary(F new (u,v))=a(u,v)lmaginary(F(u,v)) 


30 ReaI(F TOW (u,v))=a(u,v)Real(F (u,v)) 

[0043] Turning now to FIG. 8, the shaped rearranged carrier shown in block 34 is convolved in block 36 with the 
message 24. The convolution disperses the message energy to form a secure dispersed message. The secure dis- 
persed message is tiled across the user image by adding to form an embedded image in block 37. The embedded 

35 image 38 is printed as shown in block 40. The embedded image has a discernible physical characteristic and is then 
printed on the medium 10. In the specific embodiment described herein, the discernible physical characteristic of a 
receiver is the fibrous structure of the scanned region of the receiver. The receiver can be made of paper, plastic, 
porcelain, laminates, or combinations thereof. Experimentation has shown that error diffusion is preferable to traditional 
screening technologies. In the preferred embodiment an ink-jet printer prints the image using error diffusion at 300 or 

40 600 dpi. 

[0044] When it comes time to extract the message, a user may or may not have the carrier available. If the carrier 
is not known beforehand, then it becomes necessary to rescan it from the paper. In this case, assume that the location 
of the carrier (that is, the location of the fibrous region) is known in advance. The carrier is obtained by repeating the 
steps of FIG. 7. Typically, the scan of the fibrous area will have some level of rotation or scale inaccuracy. Because of 

45 this, it is useful to scan the embedded image first to determine via the autocorrelation technique described above, the 
amount of scale and rotation correction needed. Once the correction factors are known it is possible to get a more 
accurate estimate of the location of fibrous carrier needed to decode the message contained in the printed image. 
[0045] FIG. 1 0 depicts the process of extracting the embedded message from a tiled image on the receiver using 
weighted sums. To decode the message, the derived fibrous carrier FIG. 7, the rearranged shaped carrier shown in 

so block 34 is correlated with sections of the scanned embedded image 1 4 as shown in block 38 of FIG . 1 0. Each correlated 
section is multiplied by a weighting scalar that depends on a calculated signal and noise value. 


55 


Claims 

1. A method for printing an authenticatable image having an embedded image into a receiver having a discernible 
physical characteristic, such that the printed image can be used to authenticate the receiver, comprising the steps 
of: 
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10 


40 


a) scanning the receiver to produce information related to the discernible physical characteristic of the receiver; 

b) providing a carrier, which includes information, related to the scanned receiver discernible physical char- 
acteristic; 

c) combining the carrier with an input image to form the authenticatable image having the embedded image; 
and 

d) printing the authenticatable image having the embedded image onto the receiver. 

2. The method of claim 1 wherein the discernible physical characteristic of the receive is the fibrous content of the 
receiver and the carrier is produced from scanning a predetermined region of the receiver. 

3. The method of claim 3 wherein the carrier producing step includes: 


i) transforming the carrier to a Frequency domain to form a transformed carrier; 

ii) shaping the transformed carrier's spectrum to cancel the MTF of the print process or to facilitate the human 
15 visual system; and 

iii) inverse transforming the transformed carrier. 

4. The method of claim 1 wherein the carrier producing step further includes encrypting the carrier signal by rear- 
ranging portions of the carrier in accordance with a key. 

20 

5. A method of authenticating a receiver having an authenticatable image having an embedded image having infor- 
mation related to the discernible physical characteristic of the receiver, comprising the steps of: 

a) scanning the authenticatable image on the receiver to produce information related to the discernible physical 
25 characteristic of the receiver; and 

b) comparing the scanned discernible physical characteristic information with the discernible physical char- 
acteristic of an authentic receiver to determine the authenticity of the authenticatable image. 

6. The method of claim 5 wherein the discernible physical characteristic of an authenticated receiver is determined 
30 by scanning a portion of the receiver on which the authenticatable image is formed. 

7. The method of claim 5 wherein the discernible physical characteristic of the receiver is the fibrous content of the 
receiver and the carrier is produced from scanning a predetermined region of the receiver. 

35 8. An authenticatable digital image, comprising: 

a) an input image which will be visible to a viewer when the authenticatable image is printed; and 

b) an embedded image in the input image and having a discernible physical characteristic related to the receiver 
into which the authenticatable image will be provided. 


9. The method of claim 1 wherein the discernible physical characteristic of the receive is the fibrous content of the 
receiver and the carrier is produced from scanning a predetermined region of the receiver. 


so 


8 


EP1 173 001 A2 



FIG. 1 


EP1 173 001 A2 



10 


EP1 173 001 A2 



11 


EP1 173 001 A2 



12 


EP 1 173 001 A2 


SCAN (256 PIXEL X 256 
LINE) REGION AT 1200 DPI 


26 


T 


28 


FFT 

3~ 


30 


i 1 


SHAPE 
SCANNED 
REGION IN THE 
FREQUENCY 
DOMAIN 


34 


? 


REARRANGE SUBREGIONS 
OF SCANNED (256 PIXEL 
X 256 LINE) REGION IN 
ACCORDANCE WITH A KEY 


32 


FFT 


-1 


FIG. 7 


'••o»oo| 


24 


34 


0 

0 OQ 


\ 


II 


o a 
o o a 


■L 


36 


37 


40 


CONVOLVE MESSAGE 
IMAGE WITH REARRANGED 
CARRIER IMAGE TO FORM 

A SECURE DISPERSED 
MESSAGE 


TILE AND ADD SECURE 
DISPERSED MESSAGE TO 
USER IMAGE TO FORM 
AN EMBEDDED IMAGE 


_J~ PRINT AT 300 OR 600 DPI 


FIG. 8 


13 


EP1 173 001 A2 


zr 

a □ 
□ a 
□ 

a 



o 
o 

I 1 I 1 LU 



14 


EP 1 173 001 A2 


• o • o 

• o • o 
o • o • 

• o • o 
o • o • 

• • • • 


• 0*0 

• o • o 
o • o • 

• o • o 
o • o • 

• • • • 


© 


• o • o 
« o • o 

O • O • 

• o • o 
o • o • 

• • • • 


□ a 
a a 
a 

□ 


s a 
a o a 
a 


• o • o 

• o • o 
o • o • 

• o • o 
o • o • 

• • • • 


+ 


• o • o 

• 0*0 
o • o • 

• o • o 
0 • o • 

• • • • 



15 


